openproject 13.13.1 Helm chart

Name: openproject Helm chart 13.13.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openproject-helm-charts

Scored 4 Oct 2026

A Helm chart for running OpenProject via Kubernetes

Version 13.13.1 2 days agoapp version 17.9.1 11Artifact Hub

openproject 13.13.1 deploys 5 container images: bitnamilegacy/memcached, openproject/openproject, openproject/hocuspocus, bitnamilegacy/postgresql and 1 more. Across them, 1,817 findings — 9 critical, 7 high — 2 on CISA KEV. The highest contribution is DEBIAN-CVE-2025-48384 in git 1:2.39.5-0+deb12u2, fixed in 1:2.39.5-0+deb12u3.

Radar Score

20,862973341,463

1,817 findings over 5 of 5 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
bitnamilegacy/memcached	1.6.24-debian-12-r0	3362186	3,346
openproject/openproject×12	17.9.1-slim	0153201	2,829
openproject/hocuspocus	release-338001b2	23169806	10,816
bitnamilegacy/postgresql	15.4.0-debian-11-r45	4031123	2,177
library/postgres	16	0019147	1,694

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,045 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-33535	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u8
Low	DEBIAN-CVE-2026-47166	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u10
Low	DEBIAN-CVE-2025-8732	libxml2@2.9.14+dfsg-1.3~deb12u2	2.9.14+dfsg-1.3~deb12u6
Low	DEBIAN-CVE-2025-8961	tiff@4.5.0-6+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-84450	libheif@1.15.1-1+deb12u1	no fix listed
Low	DLA-4089-1	libxslt@1.1.34-4+deb11u1	1.1.34-4+deb11u2
Low	DEBIAN-CVE-2026-0988	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u9
Low	DEBIAN-CVE-2021-4217	unzip@6.0-28	no fix listed
Low	DEBIAN-CVE-2026-12003	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2026-84449	libheif@1.15.1-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-6141	ncurses@6.5+20250216-2	no fix listed
Low	DEBIAN-CVE-2026-102473	dash@0.5.12-12	no fix listed
Low	DEBIAN-CVE-2026-31853	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u8
Low	DEBIAN-CVE-2026-44169	mariadb@1:10.11.11-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-42326	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u10
Low	DEBIAN-CVE-2026-45624	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u10
Low	DEBIAN-CVE-2025-15649	perl@5.36.0-7+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-86469	glib2.0@2.84.4-3~deb13u5	no fix listed
Low	DEBIAN-CVE-2026-0864	python3.11@3.11.2-6+deb12u6	no fix listed
Low	DEBIAN-CVE-2010-4756	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-56131	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-90802	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-42250	bzip2@1.0.8-6	no fix listed
Low	DEBIAN-CVE-2025-7039	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u7
Low	DEBIAN-CVE-2025-8851	tiff@4.5.0-6+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-30258	gnupg2@2.2.40-1.1	no fix listed
Low	DEBIAN-CVE-2024-56433	shadow@1:4.17.4-2	no fix listed
Low	DEBIAN-CVE-2007-2243	openssh@1:9.2p1-2+deb12u7	no fix listed
Low	DEBIAN-CVE-2024-25260	elfutils@0.188-2.1	no fix listed
Low	DEBIAN-CVE-2007-3476	libwmf@0.2.12-5.1	no fix listed
Low	DEBIAN-CVE-2026-89092	glibc@2.41-12+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-88387	libraw@0.21.4-2+deb13u1	no fix listed
Low	DEBIAN-CVE-2008-1687	m4@1.4.19-3	no fix listed
Low	DEBIAN-CVE-2025-61143	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-91781	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-91782	binutils@2.40-2	no fix listed
Low	GHSA-x2f5-4prf-w687	json@2.18.0	2.19.9
Low	DEBIAN-CVE-2026-56288	patch@2.7.6-7	no fix listed
Low	DEBIAN-CVE-2026-56289	patch@2.7.6-7	no fix listed
Low	DEBIAN-CVE-2026-13573	llvm-toolchain-19@1:19.1.7-3+b1	no fix listed
Low	DEBIAN-CVE-2026-13574	llvm-toolchain-19@1:19.1.7-3+b1	no fix listed
Low	DEBIAN-CVE-2026-3713	libpng1.6@1.6.48-1+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-90829	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-1148	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2011-4116	perl@5.40.1-6+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-91779	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-91780	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-86423	imagemagick@8:7.1.1.43+dfsg1-1+deb13u12	no fix listed
Low	DEBIAN-CVE-2026-61859	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u3	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-90831	binutils@2.40-2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
13.13.1latest	2 days ago	17.9.1	973341,463	20,862
13.13.0	4 days ago	17.9.0	973341,460	20,834
13.12.0	18 days ago	17.8.0	973561,559	21,933
13.11.0	1 month ago	17.8.0	973561,559	21,933

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openproject-helm-charts/openproject.svg)](https://charts.stackradar.io/charts/openproject-helm-charts/openproject)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.